
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.mft
File: d6U9LpdwTb6oMaZEAHKQTukacbA.mft (raw, json)
Hash identifier: 7E8JTpQ1ttUH/EyBE42QlgzE0ja49RYUKOpOxEUauYs=
Subject key identifier: 40:2C:0D:10:A4:2E:51:8A:DE:EF:A7:41:41:7C:40:90:E4:2B:B1:E7
Authority key identifier: 77:A5:3D:2E:97:70:4D:BE:A8:31:A6:44:00:72:90:4E:E9:1A:71:B0
Certificate issuer: /CN=77a53d2e97704dbea831a6440072904ee91a71b0
Certificate serial: 019748FA8CB489974694276116125F42C8DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6U9LpdwTb6oMaZEAHKQTukacbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.mft
Manifest number: 1259
Signing time: Sat 07 Jun 2025 06:01:08 +0000
Manifest this update: Sat 07 Jun 2025 06:01:08 +0000
Manifest next update: Sun 08 Jun 2025 06:01:08 +0000
Files and hashes: 1: 8YLxHIrqEOpYdEsGGRi0e0TkaqY.roa (hash: ZSlp7CySsW2GetrGVI9UQkRD/3974H3lwSYsXYBiMcM=)
2: d6U9LpdwTb6oMaZEAHKQTukacbA.crl (hash: u1jRiSGpJgDnybJStb4G6rw7R3x3w8G6dpmYiLIyFQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/d6U9LpdwTb6oMaZEAHKQTukacbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:8c:b4:89:97:46:94:27:61:16:12:5f:42:c8:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77a53d2e97704dbea831a6440072904ee91a71b0
Validity
Not Before: Jun 7 06:01:08 2025 GMT
Not After : Jun 8 06:01:08 2025 GMT
Subject: CN=402c0d10a42e518adeefa741417c4090e42bb1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4e:e6:44:0f:7c:1a:30:07:bf:1b:e8:49:d4:
1b:46:81:37:b3:31:a9:d4:40:69:d7:b7:79:3e:d8:
12:cb:6d:0c:cf:27:56:74:d6:ec:63:23:a1:00:a1:
e6:94:a6:97:68:19:fc:95:a4:b0:a8:a9:f5:c2:6d:
9e:c4:3e:0f:d2:78:1e:9b:f8:df:86:d8:fa:f3:ab:
dc:db:4a:ff:e6:9e:21:cd:42:a1:32:e2:67:55:55:
28:c1:4d:db:21:4f:54:4e:85:02:d8:37:40:d6:ae:
a9:6f:ba:55:c4:3f:e2:c6:ef:8d:e3:bc:f4:da:75:
d1:2e:4e:43:de:2f:29:34:9c:54:77:5b:2e:2d:e1:
a6:2a:f7:40:eb:32:a0:a8:eb:5c:8f:91:a9:ff:20:
51:4d:55:6e:9c:46:89:55:02:7b:c9:66:ac:7f:5d:
05:4d:e8:c0:44:9c:0e:6e:09:4a:ed:03:2c:9d:07:
b8:4c:ad:e7:8a:6e:94:00:73:50:32:4b:17:64:de:
e0:85:79:e5:d0:85:52:4a:86:4e:73:b4:87:15:c2:
5f:7a:9f:33:3a:7c:48:63:ed:4b:ca:30:b0:cc:67:
c8:59:f6:74:c8:a1:49:89:e5:3c:91:21:5c:fd:8f:
85:73:38:8e:1f:7c:d6:fe:20:67:00:ae:80:ae:f8:
ca:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2C:0D:10:A4:2E:51:8A:DE:EF:A7:41:41:7C:40:90:E4:2B:B1:E7
X509v3 Authority Key Identifier:
keyid:77:A5:3D:2E:97:70:4D:BE:A8:31:A6:44:00:72:90:4E:E9:1A:71:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6U9LpdwTb6oMaZEAHKQTukacbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:21:b8:b8:9b:ac:43:ec:df:f3:c4:59:89:de:f9:b5:a2:95:
f7:4f:52:ae:c0:e4:6e:b6:8e:d5:a4:a3:f9:8f:4a:c9:ff:00:
ff:1f:55:b2:4f:ab:28:02:7a:9a:23:cc:9c:e0:50:44:e6:ed:
b8:33:d9:74:e7:47:e3:6c:e3:34:4f:75:10:fb:5f:ab:2b:ad:
05:a0:20:1b:07:81:b0:ce:bc:b5:5e:fd:d2:f1:c9:55:01:a3:
04:ce:d8:0b:a9:eb:42:47:37:b3:7d:71:76:59:5a:56:b7:ba:
cb:f9:e2:97:07:85:65:2b:32:b2:7a:f1:4c:ca:c6:03:44:c0:
30:3c:94:8f:79:49:46:51:d9:b4:1c:c4:26:4b:7d:7b:26:18:
0b:4f:23:4c:b1:19:b8:3a:e4:54:9c:c0:53:82:c3:7d:df:ea:
4a:8c:c1:7c:a2:3a:7f:c9:f8:3b:cb:09:47:c0:8a:8e:71:45:
99:85:cb:e9:71:99:20:25:67:b4:79:72:89:ef:17:5a:0b:41:
b8:4a:e7:88:d9:9b:15:b4:6f:f6:c8:3d:88:08:ab:d1:05:bf:
56:9c:bc:c7:c2:d2:38:cb:a0:82:71:ac:e9:43:af:dc:b2:ff:
1a:ed:36:e0:ac:af:1b:0a:11:0a:d8:ac:94:03:c5:fe:54:ea:
27:ec:55:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+oy0iZdGlCdhFhJfQsjcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YTUzZDJlOTc3MDRkYmVhODMxYTY0NDAwNzI5MDRlZTkx
YTcxYjAwHhcNMjUwNjA3MDYwMTA4WhcNMjUwNjA4MDYwMTA4WjAzMTEwLwYDVQQD
Eyg0MDJjMGQxMGE0MmU1MThhZGVlZmE3NDE0MTdjNDA5MGU0MmJiMWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs07mRA98GjAHvxvoSdQbRoE3szGp
1EBp17d5PtgSy20MzydWdNbsYyOhAKHmlKaXaBn8laSwqKn1wm2exD4P0ngem/jf
htj686vc20r/5p4hzUKhMuJnVVUowU3bIU9UToUC2DdA1q6pb7pVxD/ixu+N47z0
2nXRLk5D3i8pNJxUd1suLeGmKvdA6zKgqOtcj5Gp/yBRTVVunEaJVQJ7yWasf10F
TejARJwObglK7QMsnQe4TK3nim6UAHNQMksXZN7ghXnl0IVSSoZOc7SHFcJfep8z
OnxIY+1LyjCwzGfIWfZ0yKFJieU8kSFc/Y+FcziOH3zW/iBnAK6ArvjKdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEAsDRCkLlGK3u+nQUF8QJDkK7HnMB8GA1UdIwQY
MBaAFHelPS6XcE2+qDGmRABykE7pGnGwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDZVOUxwZHdUYjZvTWFaRUFIS1FUdWthY2JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8wMzQ5NzEtYjRkYS00YmE0LThkNmUt
ZDNjOGE0OGY3YTMyLzEvZDZVOUxwZHdUYjZvTWFaRUFIS1FUdWthY2JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8wMzQ5NzEtYjRkYS00YmE0LThkNmUtZDNjOGE0OGY3YTMy
LzEvZDZVOUxwZHdUYjZvTWFaRUFIS1FUdWthY2JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkyG4uJus
Q+zf88RZid75taKV909SrsDkbraO1aSj+Y9Kyf8A/x9Vsk+rKAJ6miPMnOBQRObt
uDPZdOdH42zjNE91EPtfqyutBaAgGweBsM68tV790vHJVQGjBM7YC6nrQkc3s31x
dllaVre6y/nilweFZSsysnrxTMrGA0TAMDyUj3lJRlHZtBzEJkt9eyYYC08jTLEZ
uDrkVJzAU4LDfd/qSozBfKI6f8n4O8sJR8CKjnFFmYXL6XGZICVntHlyie8XWgtB
uErniNmbFbRv9sg9iAir0QW/Vpy8x8LSOMuggnGs6UOv3LL/Gu024KyvGwoRCtis
lAPF/lTqJ+xV2A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:33:11 2025 by rpki-client